Blogger has a vuln that allows an attacker give himself administrative privileges. The vuln is due to a HTTP Parimeter Pollution hole. The server checks the first blogid value in the post request then executes the second one: the attacker one.

http://marcoramilli.blogspot.com/2011/03/hot-to-gain-administrative-privileges.html